General
-
Target
HSBC Payment Advice.com.exe
-
Size
629KB
-
Sample
240611-w6lh3swhkd
-
MD5
b09f4f94d70cda53e8b2bfa6354f93c4
-
SHA1
eda24e23ebd136d0486da862add6da7727ea40f9
-
SHA256
5bfb6104dd68fe7fc9dfcc501c7f5bd1a52d3e6c728ac7624bbbf4639f3f9c5e
-
SHA512
7528f6f610c7e30263521480efe55590e2fac757f8782b3b696de434dcc05aefa17880eb1dade773acc3dc3d57c6a3d483c5d87997ab8efa2dad7b83812e5a10
-
SSDEEP
12288:ZgS9qJIgrUfr0+M6hcxICzB3nwoO+DsnyCh3fU3ZpDCbz95GiylnlV:/91fr0l6r4woO+iZfCDacnlV
Static task
static1
Behavioral task
behavioral1
Sample
HSBC Payment Advice.com.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
HSBC Payment Advice.com.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
HSBC Payment Advice.com.exe
-
Size
629KB
-
MD5
b09f4f94d70cda53e8b2bfa6354f93c4
-
SHA1
eda24e23ebd136d0486da862add6da7727ea40f9
-
SHA256
5bfb6104dd68fe7fc9dfcc501c7f5bd1a52d3e6c728ac7624bbbf4639f3f9c5e
-
SHA512
7528f6f610c7e30263521480efe55590e2fac757f8782b3b696de434dcc05aefa17880eb1dade773acc3dc3d57c6a3d483c5d87997ab8efa2dad7b83812e5a10
-
SSDEEP
12288:ZgS9qJIgrUfr0+M6hcxICzB3nwoO+DsnyCh3fU3ZpDCbz95GiylnlV:/91fr0l6r4woO+iZfCDacnlV
Score8/10-
Loads dropped DLL
-
Suspicious use of NtCreateThreadExHideFromDebugger
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-